メニュー
Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
| name | vt |
| description | Spin up intentionally vulnerable environments from the terminal using Docker. Use when the user wants to practice security testing, set up CTF labs, exploit CVEs, or deploy vulnerable web apps like DVWA, Juice Shop, or WebGoat. |
vt is a Go CLI tool that creates intentionally vulnerable environments for security professionals, researchers, and educators using Docker Compose.
CAUTION: vt creates intentionally vulnerable environments - always run in isolated networks (VMs/sandboxes) and never expose to the internet.
go install github.com/happyhackingspace/vt/cmd/vt@latest
git clone https://github.com/HappyHackingSpace/vt.git
cd vt
go build -o vt cmd/vt/main.go
mv vt /usr/local/bin/
| Command | Description |
|---|---|
vt template --list | List all available templates |
vt template --list --filter <tag> | Filter templates by tag (sqli, xss, ssrf, etc.) |
vt template --update | Update templates from remote repository |
vt start --id <template-id> | Start a vulnerable environment |
vt start --tags <tag1,tag2> | Start all templates matching tags |
vt ps | List running environments |
vt stop --id <template-id> | Stop an environment |
vt stop --tags <tag1,tag2> | Stop all templates matching tags |
vt -v debug <command> | Run with debug verbosity |
| Template | Type | Description |
|---|---|---|
vt-dvwa | Lab | Damn Vulnerable Web Application |
vt-juice-shop | Lab | OWASP Juice Shop |
vt-webgoat | Lab | OWASP WebGoat |
vt-bwapp | Lab | Buggy Web Application |
vt-mutillidae-ii | Lab | OWASP Mutillidae II |
More templates at vt-templates.
# List templates with SQL injection vulnerabilities
vt template --list --filter sqli
# Start DVWA
vt start --id vt-dvwa
# Start all XSS-related labs
vt start --tags xss
# Check running environments
vt ps
# Stop a specific environment
vt stop --id vt-dvwa
| Use Case | Template |
|---|---|
| Practice SQL Injection | vt-dvwa |
| Learn XSS Exploitation | vt-dvwa |
| Test OWASP Top 10 | vt-juice-shop |
| Exploit Real CVEs | vt-2025-29927 |
| API Security Testing | vt-webgoat |
| Train Security Teams | vt-mutillidae-ii |
Classify HTML pages, forms, and fields using machine learning. Use when the user needs to detect page types (login, error, captcha), identify form types (login, search, registration), or classify form fields (username, password, email) from HTML content or URLs.
Parse, modify, encode, decode, and deduplicate URLs from the command line. Use when the user needs to extract URL components, manipulate URLs, encode/decode URL strings, or deduplicate URL lists for security testing or web automation.
High-performance Python HTTP client with browser impersonation and anti-bot evasion. Use when the user needs to bypass bot detection, impersonate browsers with TLS fingerprinting, make HTTP/2/3 requests, or build web scrapers that evade anti-bot systems.
Execute code in sandboxed environments using Docker, Podman, Wasmer, gVisor, Firecracker, Kubernetes, or cloud providers. Use when the user needs to safely run untrusted code, build AI code execution pipelines, or set up isolated sandbox environments.